Free AWS-CERTIFIED-CLOUD-PRACTITIONER-CLF-C02 – Amazon AWS-CERTIFIED-CLOUD-PRACTITIONER-CLF-C02 Practice Test Question

Reference / correct answer:

Most accepted answer: C. Have the EC2 instance assume a role to obtain the privileges to upload the file.

Community votes: C=17

Selected Answer: C The recommended security best practice for giving an Amazon EC2 instance access to an Amazon S3 bucket is option C: Have the EC2 instance assume a role to obtain the privileges to upload the file. This involves using AWS Identity and Access Management (IAM) roles to grant temporary permissions to the EC2 instance, rather than hard-coding or storing access keys directly in the application or on the instance. This approach enhances security by minimizing the exposure of long-term credentials and following the principle of least privilege. The EC2 instance assumes a role with specific permissions to interact with the S3 bucket, and AWS automatically rotates temporary credentials for the instance. Options A and B involve storing IAM user's secret keys on the EC2 instance, which is not recommended due to security risks. Option D, modifying the S3 bucket policy to allow any service to upload to it at any time, is also not recommended as it may lead to security vulnerabilities and compromises the principle of least privilege. upvoted 29 times

Selected Answer: C the role is betwen two services so the right one is C upvoted 2 times

Selected Answer: C The recommended security best practice for giving an Amazon EC2 instance access to an Amazon S3 bucket is option C: Have the EC2 instance assume a role to obtain the privileges to upload the file. This involves using AWS Identity and Access Management (IAM) roles to grant temporary permissions to the EC2 instance, rather than hard-coding or storing access keys directly in the application or on the instance. upvoted 1 times

Selected Answer: C Usually roles are given to EC2 instances. Anything else is a security threat upvoted 1 times

Selected Answer: C C. Have the EC2 instance assume a role to obtain the privileges to upload the file. upvoted 1 times

Reference / correct answer:

Most accepted answer: C. Patch the physical infrastructure that hosts the EC2 instances.

Community votes: B=1, C=15

Selected Answer: C A is incorrect because when we set up an instance of ec2 we choose the operating system. B is incorrect because we are configuring and running the database on the ec2 instances so that would be our responsibility. D is incorrect because the firewall rules are our job. C is correct because the physical infrastructure where the ec2 instances run is amazon's responsibility upvoted 25 times

Selected Answer: C A. Update the guest operating system of the EC2 instances: Responsibility of the customer: Customers are responsible for managing the software environment within their EC2 instances, including updating the guest operating system. B. Maintain high availability at the database layer: Shared responsibility: While AWS ensures high availability at the infrastructure level, customers are responsible for configuring and managing the database layer to achieve high availability. This involves setting up replication, failover mechanisms, and ensuring that the database software is configured appropriately. C. Patch the physical infrastructure that hosts the EC2 instances: Responsibility of AWS: AWS manages the physical infrastructure, including patching and updates at the hardware level. Customers do not have direct control over the physical infrastructure. D. Configure the security group firewall: Responsibility of the customer: Security groups are a customer-managed feature that controls inbound and outbound traffic to and from EC2 instances. Customers are responsible for configuring security groups to meet their specific security requirements. upvoted 11 times

Selected Answer: B High Availability of a NoSQL managed service (like DynamoDB) is up to the cloud provider, the other answers are off-topic because they talk about other AWS services upvoted 1 times

Selected Answer: C the right answer is option C because it's the AWS responsible for that part upvoted 1 times

Selected Answer: C C is correct because the physical infrastructure where the ec2 instances run is amazon's responsibility upvoted 1 times

Reference / correct answer:

Most accepted answer: A. Elimination of expenses for running and maintaining data centers

Community votes: A=14, C=1

Selected Answer: A A. Elimination of expenses for running and maintaining data centers Moving to the AWS Cloud allows users to leverage AWS's infrastructure, eliminating the need for organizations to run and maintain their own data centers. This shift can lead to cost savings, improved scalability, and increased flexibility. Options B, C, and D are not accurate: B. Price discounts that are identical to discounts from hardware providers AWS provides its pricing model, and while cost savings can be achieved by leveraging cloud services, the pricing structure is different from traditional hardware providers. C. Distribution of all operational controls to AWS While AWS manages the underlying infrastructure, users still retain control over the operational aspects of their applications and services. It's a shared responsibility model, where AWS manages certain aspects, and users manage others. D. Elimination of operational expenses While there may be cost savings, it's not accurate to say that all operational expenses are eliminated. Users are still responsible for managing and optimizing their cloud resources, applications, and configurations. upvoted 8 times

Selected Answer: A La respuestaes la A upvoted 1 times

Selected Answer: A Elimination of expenses for running and maintaining data centers. upvoted 1 times

Selected Answer: A Elimination of expenses for running and maintaining data centers. upvoted 1 times

Selected Answer: A A is correct, no need to pay for data center expenses upvoted 3 times